JSON Web Tokens (JWT) are everywhere — modern APIs, authentication systems, microservices, IoT devices, and secure workflow automation. Nodlyn makes it incredibly easy to sign and verify JWTs inside your workflows, enabling secure data exchange and controlled access between steps, services, and external systems.
With the JWT Connector, you can generate signed tokens, validate incoming tokens, attach claims, set expiration times, and seamlessly integrate secure authentication logic into any automation.
Step 1: Sign a JWT
To create a signed token, drag a Sign JWT node onto the canvas. This capability takes a JSON payload, applies optional claims, and signs it using an HMAC secret key.
- algorithm — HS256, HS384, HS512
- secretKey — your HMAC secret
- payload — JSON object to embed inside the token
- issuer (iss) — optional issuer claim
- subject (sub) — optional subject claim
- expiresInSeconds — optional expiration time
Nodlyn automatically adds iat (issued-at timestamp) and handles Base64Url encoding, header creation, and cryptographic signing using the selected algorithm.
The node returns:
- token — the signed JWT
- ok — success flag
This is ideal for workflows that need to authenticate API calls, generate session tokens, or securely pass data between steps.
Step 2: Verify a JWT
Use the Verify JWT node to validate a token’s signature and expiration. Nodlyn checks the HMAC signature, decodes the payload, and ensures the token has not expired.
- algorithm — HS256, HS384, HS512
- secretKey — the same key used to sign the token
- token — the JWT to verify
The node returns:
- valid — true if signature and expiry are valid
- payload — decoded JSON payload
- ok — success flag
This is perfect for validating incoming API requests, checking access rights, or ensuring workflow steps only run with trusted tokens.
Step 3: Use JWTs in Your Workflows
JWTs are a powerful way to securely pass information between workflow steps or external systems. Once a token is signed or verified, you can combine it with any other connector:
- Authenticate HTTP calls using HTTP Request
- Authorize access to Google Sheets or databases
- Securely trigger Tuya or Serial Bus actions
- Embed claims into documents or logs
- Validate tokens received from external services
JWT signing and verification becomes a reliable security layer inside your automation ecosystem.
Step 4: Supported Algorithms
The JWT Connector supports industry-standard HMAC algorithms:
- HS256 — HMAC-SHA256
- HS384 — HMAC-SHA384
- HS512 — HMAC-SHA512
These algorithms ensure strong cryptographic protection and compatibility with most modern authentication systems.
Step 5: Build Secure Automations
Once JWT data enters your workflow, you can build advanced security-driven automations:
- Generate short-lived tokens for API calls
- Verify tokens before executing sensitive actions
- Attach dynamic claims based on workflow logic
- Reject expired or invalid tokens automatically
- Combine JWT validation with conditional branching
JWT becomes a powerful security primitive inside Nodlyn workflows.
What's Next?
Experiment with multi-step authentication flows, combine JWT verification with role-based logic, or integrate external identity providers. Nodlyn gives you the tools to automate any JWT-secured process.